Firetruck

CVE-2020-1350

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Windows ServerMicrosoft / Windows Server2008 for 32-bit Systems Service Pack 2affected
Windows ServerMicrosoft / Windows Server2008 for 32-bit Systems Service Pack 2 (Core installation)affected
Windows ServerMicrosoft / Windows Server2008 for x64-based Systems Service Pack 2affected
Windows ServerMicrosoft / Windows Server2008 for x64-based Systems Service Pack 2 (Core installation)affected
Windows ServerMicrosoft / Windows Server2008 R2 for x64-based Systems Service Pack 1affected
Windows ServerMicrosoft / Windows Server2008 R2 for x64-based Systems Service Pack 1 (Core installation)affected
Windows ServerMicrosoft / Windows Server2012affected
Windows ServerMicrosoft / Windows Server2012 (Core installation)affected
Windows ServerMicrosoft / Windows Server2012 R2affected
Windows ServerMicrosoft / Windows Server2012 R2 (Core installation)affected
Windows ServerMicrosoft / Windows Server2016affected
Windows ServerMicrosoft / Windows Server2016 (Core installation)affected
Windows ServerMicrosoft / Windows Server2019affected
Windows ServerMicrosoft / Windows Server2019 (Core installation)affected
Windows Server, version 1903 (Server Core installation)Microsoft / Windows Server, version 1903 (Server Core installation)unspecifiedaffected
Windows Server, version 1909 (Server Core installation)Microsoft / Windows Server, version 1909 (Server Core installation)unspecifiedaffected
Windows Server, version 2004 (Server Core installation)Microsoft / Windows Server, version 2004 (Server Core installation)unspecifiedaffected